PRIVACY POLICY
LuxePrive Aesthetics and Education Limited
Trading as LuxéPrive Aesthetics
Last updated: 29 September 2026
1. Who we are
LuxePrive Aesthetics and Education Limited, trading as LuxéPrive Aesthetics, is responsible for the personal information collected and used in connection with our aesthetics services.
Our business details are:
Company name: LuxePrive Aesthetics and Education Limited
Trading name: LuxéPrive Aesthetics
Address: 20 Enterprise House, Foundry Lane, Horsham, RH13 5PX, United Kingdom
Email: luxepriveuk@gmail.com
For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we act as a data controller for the personal information we collect and use in providing our services.
This Privacy Policy explains what information we collect, why we collect it, how we use it, how long we keep it and the rights you have over your personal information.
2. The information we collect
We may collect and process the following types of personal information.
Personal and contact information
Full name
Email address
Telephone number
Address, where required
Date of birth, where necessary for treatment suitability and identification
Medical and clinical information
When you enquire about or receive treatment, we may collect information such as:
Medical history and relevant health conditions
Current medication and allergies
Previous aesthetic treatments
Consultation notes and treatment plans
Treatment consent forms
Clinical photographs
Treatment records and aftercare information
Information about adverse reactions or complications
Medical information is particularly sensitive and receives additional protection under data protection law.
Booking and payment information
We may collect:
Appointment dates and times
Treatment selections
Booking fees and payment records
Cancellation and rescheduling information
Refund information
Payments and card details may be processed through third-party payment providers. We do not intend to store full payment card details ourselves.
Website information
When you visit our website, certain technical information may be collected, depending on the website settings and cookies in use. This may include:
IP address
Browser and device information
Pages visited
Website usage information
Cookie preferences
Marketing preferences
If we introduce a marketing subscription or mailing list, we may collect your marketing preferences and records of any consent you provide or withdraw.
3. How we collect your information
We may collect personal information when you:
Visit our website or submit an enquiry through a contact form.
Book an appointment through our booking system.
Complete consultation, medical history or consent forms.
Communicate with us by email, telephone or WhatsApp.
Contact us through social media.
Attend an appointment or receive treatment.
Make a payment or request a refund.
We may also receive relevant information from a prescribing professional or another healthcare professional where it is lawfully shared and necessary for your care.
4. How we use your information
We use personal information for purposes including:
Managing appointments
Processing bookings and booking fees.
Confirming, changing or cancelling appointments.
Sending appointment reminders and essential service communications.
Providing safe and appropriate treatment
Assessing treatment suitability.
Reviewing relevant medical history.
Recording consultations and treatments.
Documenting consent and aftercare.
Managing adverse reactions, complications or concerns.
Managing our business
Processing payments and refunds.
Maintaining financial and business records.
Responding to enquiries and complaints.
Improving our services and administration.
Communicating with you
We may contact you about your appointment, treatment, aftercare, safety or other matters directly related to the service you have requested.
We will only send promotional or marketing communications where we have the appropriate permission or other lawful basis to do so.
5. Our lawful bases for processing
We must have a lawful basis for processing personal information under the UK GDPR. The basis depends on the purpose for which we use the information.
Depending on the circumstances, we may rely on:
Contract: where processing is necessary to provide a service you have requested, such as managing your appointment.
Legal obligation: where we need to retain or disclose information to comply with applicable legal requirements.
Legitimate interests: where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
Consent: where you have freely agreed to a specific use of your information and consent is the appropriate lawful basis.
Medical and other health information is special category data. We must also satisfy an applicable additional condition under data protection law before processing it.
We will identify and document the appropriate lawful bases and special category conditions for our processing activities.
6. Clinical photographs
Clinical photographs may be taken where necessary to support consultation, treatment planning, clinical records or the assessment of treatment outcomes.
Clinical photographs are treated as confidential and are only accessed or shared where there is a lawful and appropriate reason.
We will seek separate permission before using identifiable photographs for marketing, advertising, social media, our website or other promotional purposes.
Agreeing to marketing use of photographs is optional and is not a condition of receiving treatment.
If you withdraw permission for future marketing use, we will stop using the photographs for that purpose where reasonably possible. However, we may not be able to remove material that has already been published or shared by others.
7. Who we share your information with
We do not sell your personal information.
We may share relevant information with carefully selected third parties where necessary to provide our services, meet legal obligations or protect someone's safety.
These may include:
Faces Consent
We use Faces Consent to support bookings, consultation forms, consent records and treatment administration.
Information submitted through the platform may be processed by Faces Consent in accordance with its own privacy information and contractual arrangements.
Payment providers
Payment providers may process payment information to complete transactions, manage refunds and prevent fraud.
Prescribers and healthcare professionals
Where necessary and lawful, relevant information may be shared with a prescribing professional, GP or another healthcare professional to support treatment safety or continuity of care.
Emergency services
Where necessary to protect someone's vital interests or respond to an emergency, relevant information may be shared with emergency services or healthcare professionals.
Website and technology providers
Our website is hosted through Squarespace. Other technology providers may support the operation, security and administration of our website and business.
Third parties may process information on our behalf or act as separate data controllers, depending on the service and circumstances.
8. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to clinical information should be limited to people who need it for legitimate business or clinical purposes.
We also take reasonable steps to ensure that third-party providers handling information on our behalf provide appropriate safeguards.
No method of electronic storage or transmission is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
If a personal data breach occurs, we will assess it and take any action required by applicable data protection law.
9. How long we keep your information
We retain personal information only for as long as necessary for the purposes for which it was collected, including legal, clinical, accounting and record-keeping requirements.
Our proposed retention approach is:
Clinical records: up to eight years after your last treatment, subject to confirmation of applicable professional and insurer requirements.
Financial records: for the period required by applicable tax and accounting legislation.
Enquiries and general correspondence: for as long as reasonably necessary to deal with the enquiry and any related follow-up.
Marketing preferences: until you withdraw your consent or otherwise object, subject to retaining a minimal record where necessary to respect your preferences.
We may retain certain information for longer where required by law, where necessary to establish or defend legal claims, or where there is another lawful reason to do so.
When information is no longer required, we will take reasonable steps to securely delete or anonymise it.
10. Your data protection rights
Under applicable data protection law, you may have the right to:
Access: request a copy of the personal information we hold about you.
Rectification: ask us to correct inaccurate or incomplete information.
Erasure: request deletion of your information where the law allows.
Restriction: ask us to limit how we use your information in certain circumstances.
Object: object to certain types of processing, including processing based on legitimate interests.
Data portability: request certain information in a commonly used electronic format where the right applies.
Withdraw consent: withdraw consent where we rely on it as our lawful basis.
These rights are subject to certain legal exceptions. For example, we may need to retain some clinical or financial records even if you request their deletion.
To exercise your rights, contact us at:
We may need to verify your identity before responding to a request.
11. Marketing communications
We may send essential communications relating to appointments, payments, treatments, aftercare and client safety.
These are service communications rather than promotional marketing.
Promotional emails, newsletters, offers and other marketing communications are separate from essential service communications.
We will only send electronic marketing where we have the appropriate permission or another lawful basis under applicable law.
You can withdraw marketing consent or opt out of marketing communications at any time. This will not affect essential communications relating to your appointments or treatment.
12. Cookies and website technologies
Our website is hosted by Squarespace, which may use cookies and similar technologies to operate the website, maintain security and support its functionality.
Some cookies are essential for the website to work. Other cookies, such as analytics or advertising cookies, may require your consent before they can be used.
Our website currently does not use additional tracking tools such as Google Analytics or Meta Pixel.
We are reviewing our Squarespace cookie settings and intend to provide visitors with appropriate information and choices about cookies.
You can also manage cookies through your browser settings. Disabling certain cookies may affect how parts of the website function.
13. Links to other websites
Our website may contain links to third-party websites, including booking platforms and social media services.
When you follow these links, the privacy practices of the third-party website will apply. We are not responsible for the privacy policies or content of external websites.
We recommend reviewing the privacy information of any third-party service you use.
14. Complaints
If you have concerns about how we collect or use your personal information, please contact us first so that we can try to resolve the matter.
Email: luxepriveuk@gmail.com
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
You can find information about making a complaint on the ICO's official complaints page.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or legal obligations.
The latest version will be made available on our website, with the date of the most recent update shown at the top of the policy.